Security Now (Audio)

By TWiTTechnology

Security Now (Audio) episodes

September 17, 2024SN 992: Password Manager Injection Attacks - Aging Media, Naval Starlink, adam:ONE
Windows Endpoint Security Ecosystem Summit

Aging storage media does NOT last forever

How Navy chiefs conspired to get themselves illegal warship Wi-Fi

adam:ONE named the #1 best Secure Access Service Edge (SASE) solution

AI Talk

Password Manager Injection Attacks

Show Notes - https://www.grc.com/sn/SN-992-Notes.pdf

Hosts: Steve Gibson and Mikah Sargent

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
threatlocker.com for Security Now
joindeleteme.com/twit promo code TWIT
1password.com/securitynow
vanta.com/SECURITYNOW
2 hr 24 min
September 10, 2024SN 991: RAMBO - Cloned YubiKeys, Telegram vs. Signal, French Elevators, Unix Time
Offer to uninstall Recall was a bug, not a feature

YubiKeys can be cloned

Miscellany

Is WhatsApp secure?

Telegram vs Signal

French elevators

Freezing your credit

The Quiet Canine

Unix time

Bobiverse book 5

Exodus: The Achemedes Engine

Watching SpinRite

RAMBO

Show Notes - https://www.grc.com/sn/SN-991-Notes.pdf

Hosts: Steve Gibson and Mikah Sargent

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
flashpoint.io
bigid.com/securitynow
Melissa.com/twit
bitwarden.com/twit
2 hr 20 min
September 03, 2024SN 990: Is Telegram an Encrypted App? - CrowdStrike Exodus, DDoS-as-a-Service, 'Active Listening' Ad Tech?
Telegram puts End-to-End Privacy in the Crosshairs

Free security logging is good for everyone

CrowdStrike hemorrhaging customers

Microsoft to meet privately with EDR (Endpoint Detection & Response) vendors

Yelp's Unhappy with Google

Telegram as the hotbed for DDoSass – DDoS as a Service

Chrome grows more difficult to exploit

Cox Media Group's "Active Listening" has apparently not ended

Cascading Bloom Filter follow-up

Closing the Loop

Is Telegram an encrypted app?

Show Notes - https://www.grc.com/sn/SN-990-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
bigid.com/securitynow
threatlocker.com for Security Now
vanta.com/SECURITYNOW
joindeleteme.com/twit promo code TWIT
2 hr 10 min
August 27, 2024SN 989: Cascading Bloom Filters - Key Card Backdoors, Fake Cisco Gear
CrowdStrike Exec's "Most Epic Fail" Award

Hardware backdoors discovered in Chinese-made key cards

Counterfeit CISCO networking gear

SpinRite

Errata

NPD breach updates from listeners

Looking back at old SN episodes

Cascading Bloom Filters

Show Notes - https://www.grc.com/sn/SN-989-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
canary.tools/twit - use code: TWIT
1password.com/securitynow
e-e.com/twit
INFO.ACILEARNING.COM/TWIT code SN100
2 hr 11 min
August 20, 2024SN 988: National Public Data - Big Patch Tuesday, The Biggest Data Breach
Revocation Update

GRC's next experiment

Patch Tuesday

"The Famous Computer Café"

IsBootSecure

GRC Email

Working through WiFi Firewalls

Transferring DNS

OCSP attestation vs. TLS expiration

Platform key expiration

National Public Data

Show Notes - https://www.grc.com/sn/SN-988-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
bitwarden.com/twit
vanta.com/SECURITYNOW
threatlocker.com for Security Now
joindeleteme.com/twit promo code TWIT
2 hr 15 min
August 13, 2024SN 987: Rethinking Revocation - SinkClose, IsBootSecure, Another Bad RCE
Sitting Ducks DNS attack

A Bad RCE in another Microsoft server

SinkClose

The CLFS.SYS BSoD

IsBootSecure

Rethinking Revocation

Show Notes - https://www.grc.com/sn/SN-987-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
joindeleteme.com/twit promo code TWIT
bigid.com/securitynow
vanta.com/SECURITYNOW
1password.com/securitynow
2 hr 19 min
August 06, 2024SN 986: How Revoking! - Crowdstrike Damage, Firefox Cookies
Platform Key Disclosure

Firefox's 3rd-party Cookie mess

The W3C Finally Weighs-in

CrowdStrike Damages.

GRC's Email

How Revoking!

Show Notes - https://www.grc.com/sn/SN-986-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
threatlocker.com for Security Now
joindeleteme.com/twit promo code TWIT
bigid.com/securitynow
vanta.com/SECURITYNOW
2 hr 3 min
July 30, 2024SN 985: Platform Key Disclosure - Crowdstrike Post-mortem, Entrust Update
Crowdstrike post-mortem

PiDP-11

What Crowdstrike is fixing

Marcus Hutchins on who is to blame

Entrust's Updated Info

3rd-Party Cookie Surprise

Security training firm mistakenly hires a North Korean attacker

Google and 3rd party cookies

Google's influence

The auto industry and data brokers

DNS Benchmark on Mac

Platform Key Disclosure

Show Notes - https://www.grc.com/sn/SN-985-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
lookout.com
INFO.ACILEARNING.COM/TWIT code SN100
panoptica.app
bitwarden.com/twit
2 hr 31 min
July 23, 2024SN 984: CrowdStruck - Crowdstrike, Cellebrite, More Entrust
Cellebrite unlocks Trump's would-be assassin's phone.

Cisco reported on a CVSS of 10.0

Entrust drops the other shoe

Google gives up on removing 3rd-party cookies

Miscellany

Snowflake and data warehouse applications

CDK auto dealership outage

Polyfill.io and resource hashes

MITM

Blocking Copilot

Blocking incoming connections via IP

CrowdStruck

Show Notes - https://www.grc.com/sn/SN-984-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
panoptica.app
canary.tools/twit - use code: TWIT
vanta.com/SECURITYNOW
bigid.com/securitynow
2 hr 28 min
July 16, 2024SN 983: A Snowflake's Chance - CDN Safety, Microsoft's Behavior, CDK Ransomware Attack
Using Content Delivery Networks Safely

The CDK Global Ransomware Attack

The IRS and Entrust

Polyfill.io fallout

Microsoft's Behavior

A Snowflake's Chance

Show Notes - https://www.grc.com/sn/SN-983-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
vanta.com/SECURITYNOW
panoptica.app
lookout.com
joindeleteme.com/twit promo code TWIT
2 hr 8 min

About Security Now (Audio)

From the publisher's feed

Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.